PT-2018-5182

Name of the Vulnerable Software and Affected Versions Jenkins versions 2.73.1 and earlier, 2.83 and earlier Description The issue concerns the remote API at "/job/job-name/api" which contained information about upstream and downstream projects, including tasks that the current user otherwise has ...

Information Disclosure

hadoop-common is vulnerable to information disclosure. Malicious users can use XML directives in a configuration file to discover the job history on the server and to discover private files...

CVE-2017-14094

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

Design/Logic Flaw

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

CVE-2017-14094

CVE-2017-14094 affects Trend Micro Smart Protection Server (Standalone) up to version 3.2. It enables remote command execution via cron job injection in the admin_update_program.php flow when updates are scheduled, due to unsanitized HTTP parameters used to build cron entries. The vulnerability i...

CVE-2017-14094

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

CVE-2017-15713

Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct a configuration file containing XML...

CVE-2017-15713

Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct a configuration file containing XML...

PT-2018-5984

Name of the Vulnerable Software and Affected Versions: Apache Hadoop versions 0.23.x, 2.x through 2.7.4, 2.8.x through 2.8.2, 3.0.0-alpha through 3.0.0-beta1 Description: A cluster user can expose private files owned by the user running the MapReduce job history server process by constructing a...

CVE-2017-15713: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct a configuration file containing XML...

PT-2018-5348 · Rails · Delayed Job Web

Name of the Vulnerable Software and Affected Versions: delayed job web rails gem versions 1.2.9 through 1.4 Description: An exploitable cross site scripting XSS issue exists in the filter functionality. A specially crafted URL can cause an XSS flaw, allowing an attacker to execute arbitrary...

CVE-2017-14094: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

PT-2018-5618

Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server Standalone versions 3.2 and below Description: A vulnerability could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system. Recommendations: For versions 3.2...

WordPress WpJobBoard plugin SQL injection vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . WpJobBoard plugin is used in one of the job management plugin . A SQL injection vulnerability exists in WordPress...

Fedora 27 : glibc (2017-828f8a8fc6)

This update addresses RHBZ1468837, which caused bash to lack job control in mock chroots. Note that glibc inside the chroot needs to be upgraded for the fix to be effective. In additon, two dynamic linker issues where fixed which are not security bugs, but received CVE IDs nevertheless RHBZ152486...

CVE-2018-5695

The WpJobBoard plugin 4.4.4 for WordPress allows SQL injection via the order or sort parameter to the wpjb-job or wpjb-alerts module, with a request to wp-admin/admin.php...

CVE-2018-5695: Improper Neutralization of Special Elements used in an SQL Command

The WpJobBoard plugin 4.4.4 for WordPress allows SQL injection via the order or sort parameter to the wpjb-job or wpjb-alerts module, with a request to wp-admin/admin.php...

PT-2018-17092

Name of the Vulnerable Software and Affected Versions: WpJobBoard plugin version 4.4.4 Description: The issue allows SQL injection via the order or sort parameter to the "wpjb-job" or "wpjb-alerts" module, with a request to "wp-admin/admin.php". Recommendations: For WpJobBoard plugin version 4.4....

snagajob.com XSS vulnerability

Open Bug Bounty ID: OBB-515600 Description| Value ---|--- Affected Website:| snagajob.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...

WpJobBoard v4.4.4 - Multiple SQL Injection Vulnerabilities

Document Title: =============== WpJobBoard v4.4.4 - Multiple SQL Injection Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1940 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5695 CVE-ID: ======= CVE-2018-5695 Release Date:...